Whamcloud - gitweb
LU-14121 nodemap: do not force fsuid/fsgid squashing 61/40961/4
authorSebastien Buisson <sbuisson@ddn.com>
Fri, 13 Nov 2020 10:36:14 +0000 (19:36 +0900)
committerOleg Drokin <green@whamcloud.com>
Sat, 23 Jan 2021 08:18:20 +0000 (08:18 +0000)
commit02b04c64a87aefb4f6e953d88f3cde1861b6844d
treedc5c82fb89dbcdf63c364caa8a2732a21f1c4c6e
parent233656e5dbffec99421326644f64db3d4e46dbc7
LU-14121 nodemap: do not force fsuid/fsgid squashing

In the current implementation, if the real uid is squashed, then the
fsuid is similarly squashed, no matter what is the value of the
effective uid.
This squashing is a little bit too strict, and we should instead trust
mapped fsuid and fsgid values.

Also add euid_access test program and sanity-sec test_55 to verify
the issue is fixed.

Lustre-change: https://review.whamcloud.com/40645
Lustre-commit: 355787745f21b22bb36210bb1c8e41fb34e7b665

Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: Iecaecac5054b105cd42206b0a9a3868cde0269b4
Reviewed-on: https://review.whamcloud.com/40961
Tested-by: jenkins <devops@whamcloud.com>
Tested-by: Maloo <maloo@whamcloud.com>
Reviewed-by: Lai Siyao <lai.siyao@whamcloud.com>
Reviewed-by: Andreas Dilger <adilger@whamcloud.com>
Reviewed-by: Oleg Drokin <green@whamcloud.com>
lustre/mdt/mdt_lib.c
lustre/tests/.gitignore
lustre/tests/Makefile.am
lustre/tests/euid_access.c [new file with mode: 0644]
lustre/tests/sanity-sec.sh